$ rpki-client -vvf repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft File: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft (raw, json) Hash identifier: WPa+uq+6PN353Zjnfj5Dz3ZcZzxY9G2lHl5gtzO8BHY= Subject key identifier: 84:A1:FB:56:3A:21:51:56:2C:8A:D6:63:D7:F2:78:E0:B7:E5:6E:7B Authority key identifier: 3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B Certificate issuer: /CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Certificate serial: 1DBA577520184AC73F12DF2E3807F527DB236F06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft Manifest number: 0358 Signing time: Sat 23 Aug 2025 00:31:17 +0000 Manifest this update: Sat 23 Aug 2025 00:26:17 +0000 Manifest next update: Tue 26 Aug 2025 03:45:17 +0000 Files and hashes: 1: 3130332e3137312e31392e302f32342d3234203d3e20313338363038.roa (hash: DS4rfXsOZAd6zyO+PWFbBzflwksjO/ECzvelckHR5dk=) 2: 3130332e3137312e31382e302f32342d3234203d3e20313336303532.roa (hash: 5h5J8xW62JxvWusBPqO7t7BtPqu0f0FKKCSn5YoWmpk=) 3: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl (hash: /EB0Um6PyZGjiDMPzkVrhccITmyJcyAT8vq/dCFNTXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 03:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ba:57:75:20:18:4a:c7:3f:12:df:2e:38:07:f5:27:db:23:6f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Validity Not Before: Aug 23 00:26:17 2025 GMT Not After : Aug 26 03:45:17 2025 GMT Subject: CN=84A1FB563A2151562C8AD663D7F278E0B7E56E7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6b:7c:03:a6:14:1f:18:73:a0:fa:53:ce:38: e2:48:8c:67:3b:c0:7e:f7:23:89:fc:d9:35:27:e6: 6c:e4:70:2e:19:81:bc:8a:5d:ec:88:2d:a1:27:79: 08:ea:49:02:17:ac:24:fa:b7:a1:5a:76:c1:7e:a4: 99:4e:7e:d7:40:84:92:ae:fe:9c:e7:8a:9a:73:ef: 17:3a:fd:95:f1:5d:4d:19:f7:53:54:49:ca:82:41: 57:df:e0:8c:f6:9b:a6:fe:15:38:7a:34:2d:67:2d: 98:4b:55:33:50:a7:8b:4a:ee:26:fe:4f:b2:c0:c4: 42:b9:5a:da:d4:ac:ed:c6:da:81:30:b2:89:7a:17: 22:f3:5d:d7:6a:88:67:e7:20:6f:d2:64:88:b4:ef: c4:25:37:4f:3a:a3:05:fd:b1:74:47:c5:18:83:c5: ce:eb:f7:64:0b:10:ea:5e:93:ef:4e:53:ee:27:6c: 73:f9:19:1d:24:4b:84:68:af:06:cb:53:71:62:31: 27:61:71:82:07:ad:39:f0:e3:7d:1c:8d:25:39:15: 5d:c5:f2:df:a5:95:4e:09:71:64:dd:28:50:70:a5: e1:8a:c9:6e:fe:0b:f7:ba:00:7f:a7:dc:1a:23:4d: e2:6d:a5:1d:64:99:0a:4d:18:f3:bb:b9:fc:b6:5e: 12:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A1:FB:56:3A:21:51:56:2C:8A:D6:63:D7:F2:78:E0:B7:E5:6E:7B X509v3 Authority Key Identifier: keyid:3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:3a:89:30:3d:b2:8d:cf:ff:4a:19:af:94:b3:b6:a3:54:08: 10:54:7d:df:e6:20:d1:43:e9:1f:f7:b0:f2:18:07:e2:cb:f1: e7:69:3a:95:0e:f4:46:e3:30:43:b2:32:ec:31:c2:9b:de:8e: 3f:64:c6:11:6a:c2:6c:de:45:e7:4a:91:82:0e:56:77:5f:17: e0:67:f8:cd:ec:23:bd:d1:b6:6c:3e:3b:1c:f2:98:7a:58:77: d6:cf:a4:47:0b:e9:25:e6:18:9b:33:bc:a0:7b:20:ce:59:32: d6:e7:c4:ea:b9:09:8d:9e:af:1b:54:13:a9:f0:52:37:14:04: 76:b6:6d:bd:68:dd:c6:3d:7d:88:a7:7c:6b:12:80:9f:b8:8c: c2:a6:71:20:9f:81:9a:98:79:f7:db:f9:fb:94:12:38:d1:9e: 54:1c:9f:9f:af:27:4b:82:03:20:ee:9f:cb:f6:14:16:55:74: 69:17:ae:a5:fe:27:0b:c1:44:ae:1c:77:c3:7b:4b:46:7e:84: b7:5c:f7:a0:9e:3c:73:da:a4:06:d8:80:3d:7e:80:e3:87:2d: b4:d5:64:8f:76:da:6c:ab:46:16:68:6c:74:71:c3:42:43:a1: e1:08:da:f5:95:4a:0e:63:0b:3b:04:58:6a:57:4d:db:9a:40: 16:1c:99:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHbpXdSAYSsc/Et8uOAf1J9sjbwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZB MENCOUY4QjAeFw0yNTA4MjMwMDI2MTdaFw0yNTA4MjYwMzQ1MTdaMDMxMTAvBgNV BAMTKDg0QTFGQjU2M0EyMTUxNTYyQzhBRDY2M0Q3RjI3OEUwQjdFNTZFN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZa3wDphQfGHOg+lPOOOJIjGc7 wH73I4n82TUn5mzkcC4ZgbyKXeyILaEneQjqSQIXrCT6t6FadsF+pJlOftdAhJKu /pznippz7xc6/ZXxXU0Z91NUScqCQVff4Iz2m6b+FTh6NC1nLZhLVTNQp4tK7ib+ T7LAxEK5WtrUrO3G2oEwsol6FyLzXddqiGfnIG/SZIi078QlN086owX9sXRHxRiD xc7r92QLEOpek+9OU+4nbHP5GR0kS4RorwbLU3FiMSdhcYIHrTnw430cjSU5FV3F 8t+llU4JcWTdKFBwpeGKyW7+C/e6AH+n3BojTeJtpR1kmQpNGPO7ufy2XhIhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhKH7VjohUVYsitZj1/J44LflbnswHwYDVR0j BBgwFoAUPJFI7yevXtNIE0L13vJaJqDLn4swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YThmNjlmNy05MzMyLTRjZDQtYjNlNS1jYzZjNDc3MmNmNzMvMC8zQzkxNDhFRjI3 QUY1RUQzNDgxMzQyRjVERUYyNUEyNkEwQ0I5RjhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZBMENC OUY4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWE4ZjY5ZjctOTMzMi00Y2Q0LWIz ZTUtY2M2YzQ3NzJjZjczLzAvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVB MjZBMENCOUY4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIM6iTA9so3P/0oZr5SztqNUCBBUfd/mINFD 6R/3sPIYB+LL8edpOpUO9EbjMEOyMuwxwpvejj9kxhFqwmzeRedKkYIOVndfF+Bn +M3sI73Rtmw+OxzymHpYd9bPpEcL6SXmGJszvKB7IM5ZMtbnxOq5CY2erxtUE6nw UjcUBHa2bb1o3cY9fYinfGsSgJ+4jMKmcSCfgZqYeffb+fuUEjjRnlQcn5+vJ0uC AyDun8v2FBZVdGkXrqX+JwvBRK4cd8N7S0Z+hLdc96CePHPapAbYgD1+gOOHLbTV ZI922myrRhZobHRxw0JDoeEI2vWVSg5jCzsEWGpXTduaQBYcmVc= -----END CERTIFICATE-----Generated at Sat Aug 23 12:10:46 2025 by rpki-client